Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier: t/EvYMxRkx+8i3K+L8xsjva8YFOhXiuVl3Z/t39dR0k=
Subject key identifier: 78:1B:4C:BB:65:BB:63:05:42:BA:52:2D:32:65:CF:94:5A:BE:82:66
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial: 01A06DCBF370617E5D230F1A880A84AA7D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number: 1A3E
Signing time: Fri 04 Sep 2026 19:01:17 +0000
Manifest this update: Fri 04 Sep 2026 19:01:17 +0000
Manifest next update: Sat 05 Sep 2026 19:01:17 +0000
Files and hashes: 1: DkVdvbXhpbo9CQqVcVFBg1LNoNE.roa (hash: qaF1R+er71d5hFs2KTiNhXAjh56KPYgioy+6tvssIEE=)
2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: 7ofv5teEOElielcUicMTApe56XdlScPpGL9phkTR2Ws=)
3: WIQ88PUyl0Wn69b9mzqB92sF45M.roa (hash: ATP8ajAQ0MqjrK6hyWC+m5lGC/lxKRtV3XstqqIRErs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cb:f3:70:61:7e:5d:23:0f:1a:88:0a:84:aa:7d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Validity
Not Before: Sep 4 19:01:17 2026 GMT
Not After : Sep 5 19:01:17 2026 GMT
Subject: CN=781b4cbb65bb630542ba522d3265cf945abe8266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d0:00:c3:07:f8:80:ca:ef:21:1a:c0:bf:99:
e1:2e:22:fe:59:4f:6b:e9:c8:92:31:2b:64:72:07:
85:d5:90:11:20:6d:3b:18:75:ad:08:8a:90:82:e6:
14:ec:2d:ab:2c:89:4a:a1:39:c4:f4:c0:66:59:24:
d7:c8:5a:dd:9b:f0:00:b1:0d:8e:a0:51:99:22:bc:
be:81:28:d5:2e:ef:92:1c:a4:41:b1:95:4d:c6:d9:
f3:12:e6:51:78:df:f0:b7:83:d1:89:a8:e3:15:ac:
25:4c:7c:82:af:f8:71:42:29:ae:7a:7a:ee:8c:6a:
44:cb:96:3c:b9:f8:91:04:b8:38:3e:0e:a5:23:b2:
7a:cd:52:7f:64:de:48:04:29:f5:0c:ce:b8:4b:c1:
eb:a0:79:e2:64:1a:f1:ca:26:f4:b0:46:4f:df:4a:
16:2f:fa:20:1c:f7:9f:e8:eb:d5:4d:23:43:b5:b0:
4c:e6:06:92:df:36:d3:44:87:a4:f0:9c:69:ac:9a:
b8:55:d7:69:d4:48:55:1a:b2:47:18:5e:e4:a2:85:
c9:e8:d9:87:01:b1:47:ee:37:3c:72:9c:5e:8a:a8:
2b:4a:5a:a9:47:7a:87:c1:23:66:d9:46:82:35:d3:
a1:37:f8:e3:8d:86:16:dd:4a:9e:69:57:6b:8f:73:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1B:4C:BB:65:BB:63:05:42:BA:52:2D:32:65:CF:94:5A:BE:82:66
X509v3 Authority Key Identifier:
keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:98:79:2e:0b:99:1d:23:bb:8b:32:a7:9d:6a:6a:96:89:67:
e9:96:1d:90:23:db:aa:ca:25:aa:d5:3d:84:fa:5e:99:f8:59:
f0:ae:33:3e:c0:71:1c:a7:d8:84:e2:3b:f4:cd:fa:3a:21:3c:
9f:69:1e:52:81:8c:0a:b0:40:23:dd:23:43:55:af:c7:2b:70:
c6:3c:f8:71:5e:17:80:3e:76:4b:cf:18:57:89:22:1a:46:22:
0d:ce:44:70:c5:92:c0:d8:ee:06:82:07:dc:02:58:21:c3:66:
d6:0a:69:53:55:56:d9:0d:79:80:81:66:44:58:8d:26:18:3a:
66:67:f7:ee:d8:70:07:11:aa:66:7c:4f:e2:3d:af:08:80:99:
1d:28:2e:41:d7:c6:54:77:b4:5b:91:4f:09:cb:cc:df:c6:7c:
3e:aa:f2:06:12:96:fd:c5:ab:97:71:4b:9b:4c:d6:ac:75:79:
7f:b1:2c:6e:d2:1b:4a:41:5d:16:b2:ea:0e:52:8b:5e:ce:21:
af:ac:44:bf:a7:c8:5c:75:d5:fc:79:86:98:12:a5:49:22:35:
61:db:40:98:29:8d:b4:27:45:53:74:8b:ce:57:09:41:88:08:
63:ef:86:5b:31:ef:35:d9:77:03:51:2a:49:b2:5d:02:80:61:
e1:5c:4f:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBty/NwYX5dIw8aiAqEqn1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMDkxYmRjNjY2YjhhNTk0MzNjNjhkOTBlMGQ4Y2MzN2Fj
ZGNlOTIwHhcNMjYwOTA0MTkwMTE3WhcNMjYwOTA1MTkwMTE3WjAzMTEwLwYDVQQD
Eyg3ODFiNGNiYjY1YmI2MzA1NDJiYTUyMmQzMjY1Y2Y5NDVhYmU4MjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29AAwwf4gMrvIRrAv5nhLiL+WU9r
6ciSMStkcgeF1ZARIG07GHWtCIqQguYU7C2rLIlKoTnE9MBmWSTXyFrdm/AAsQ2O
oFGZIry+gSjVLu+SHKRBsZVNxtnzEuZReN/wt4PRiajjFawlTHyCr/hxQimuenru
jGpEy5Y8ufiRBLg4Pg6lI7J6zVJ/ZN5IBCn1DM64S8HroHniZBrxyib0sEZP30oW
L/ogHPef6OvVTSNDtbBM5gaS3zbTRIek8JxprJq4Vddp1EhVGrJHGF7kooXJ6NmH
AbFH7jc8cpxeiqgrSlqpR3qHwSNm2UaCNdOhN/jjjYYW3UqeaVdrj3OvtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgbTLtlu2MFQrpSLTJlz5RavoJmMB8GA1UdIwQY
MBaAFA8JG9xma4pZQzxo2Q4NjMN6zc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iNjQwODMtNTUwZS00Y2FmLWJjMjkt
YTM0YThiODA2ODMyLzEvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iNjQwODMtNTUwZS00Y2FmLWJjMjktYTM0YThiODA2ODMy
LzEvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZh5LguZ
HSO7izKnnWpqloln6ZYdkCPbqsolqtU9hPpemfhZ8K4zPsBxHKfYhOI79M36OiE8
n2keUoGMCrBAI90jQ1Wvxytwxjz4cV4XgD52S88YV4kiGkYiDc5EcMWSwNjuBoIH
3AJYIcNm1gppU1VW2Q15gIFmRFiNJhg6Zmf37thwBxGqZnxP4j2vCICZHSguQdfG
VHe0W5FPCcvM38Z8PqryBhKW/cWrl3FLm0zWrHV5f7EsbtIbSkFdFrLqDlKLXs4h
r6xEv6fIXHXV/HmGmBKlSSI1YdtAmCmNtCdFU3SLzlcJQYgIY++GWzHvNdl3A1Eq
SbJdAoBh4VxPiQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:08:23 2026 by rpki-client